CVE-2006-6585
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local...
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
Exploit likelihood
What each source reports
NVD Score used
6.4
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
- Record
CVE-2006-6585- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
- Record
CVE-2006-6585- Updated
- 2026-11-02
EUVDEUVD-2006-6568 No score
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
- Record
EUVD-2006-6568- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-626g-w2m9-f8hr No score
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local...
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
- Record
GHSA-626g-w2m9-f8hr- Updated
- 2026-11-02
OSV No score
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
- Record
CVE-2006-6585- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6585 No score
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
- Record
DEBIAN-CVE-2006-6585- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefox-esrDebian:12 |
before 45.0esr-1 | 45.0esr-1 |
firefox-esrDebian:13 |
before 45.0esr-1 | 45.0esr-1 |
firefox-esrDebian:14 |
before 45.0esr-1 | 45.0esr-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6585 is a medium vulnerability (CVSS 6.4) in Mozilla Firefox, published December 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in firefox-esr 45.0esr-1.
References
securityfocus.com/archive/1/454058/100/0/threaded
azurit.elbiahosting.sk/ffsniff/ffsniff-0.2.tar.gz
securityfocus.com/archive/1/493585/100/0/threaded
securityreason.com/securityalert/2046
nvd.nist.gov/vuln/detail/CVE-2006-6585
github.com/advisories/GHSA-626g-w2m9-f8hr
security-tracker.debian.org/tracker/CVE-2006-6585